Competitions and rewards are a positive encouragement to user participation in the security program. Merely locking users out for forgetting their passwords does not enhance user awareness. Enforcement of password formats and disciplinary actions do not positively promote awareness.

The best enabler for restoring operations after a limited ransomware incident is having reliable image backups. Backups allow the organization to quickly restore systems and data to their pre- incident state, minimizing downtime and the impact of the ransomware attack.

As business objectives and methods change, the nature and relevance of threats change as well. Choice B does not, by itself, justify regular reassessment. Choice C is not necessarily true in all cases. Choice D is incorrect because there are better ways of raising security awareness than by performing a risk assessment.

A newly discovered technique that cybercriminals are exploiting represents a threat-a potential cause of an unwanted incident that may result in harm to a system or organization.